Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230302e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3230302e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          FcVSDtv1qbMjRm+BZIl2c3pPx1iz8fXUOkyIJkBi0Jc=
Subject key identifier:   78:3A:C5:71:A1:D5:3A:F8:39:27:6D:F1:D4:13:D4:4E:CE:F0:81:8A
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       22764EB527DC346DDB0C0AB9FEECF7716D0CD367
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230302e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:57 +0000
ROA not before:           Mon 04 May 2026 16:35:57 +0000
ROA not after:            Mon 03 May 2027 16:40:57 +0000
asID:                     273261
IP address blocks:        148.224.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:76:4e:b5:27:dc:34:6d:db:0c:0a:b9:fe:ec:f7:71:6d:0c:d3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:57 2026 GMT
            Not After : May  3 16:40:57 2027 GMT
        Subject: CN=783AC571A1D53AF839276DF1D413D44ECEF0818A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:4a:f3:f7:8c:88:f8:fc:e0:12:1b:68:1c:
                    fa:09:04:94:72:c9:35:dd:ce:7f:d6:79:cd:31:62:
                    0b:c6:5d:b2:b8:fc:4b:73:be:09:c9:2a:00:1d:b4:
                    58:b6:4a:13:45:93:ed:c3:9e:c2:71:1c:50:c3:5e:
                    07:ac:41:e5:0d:7f:4f:4e:c1:83:5b:c3:4d:21:0c:
                    f5:7b:9a:bb:67:86:c7:7c:51:f1:f0:17:8a:e6:d3:
                    0b:fa:98:47:e2:72:47:bd:c0:61:35:14:a0:2f:82:
                    ce:6e:2f:d9:12:93:87:fc:4d:32:a1:a8:0d:93:cf:
                    14:d7:0b:d1:3c:c7:70:e1:5f:17:e7:5f:75:31:0c:
                    5d:76:d9:ba:d2:56:7e:1d:2f:83:e0:d0:08:97:77:
                    b0:d9:a1:c3:56:0c:da:6f:6b:f9:ce:b3:22:98:94:
                    54:24:ff:bb:c8:06:1f:26:33:5f:2d:19:be:15:20:
                    89:c9:a4:f2:16:c1:3f:ee:dd:aa:cb:e3:73:88:a3:
                    68:b6:f1:ad:30:c1:d1:59:1f:bf:05:2b:5b:2f:d3:
                    21:d1:4e:21:7b:18:99:82:ab:97:26:b8:81:1f:e4:
                    e0:ca:03:3c:70:aa:ee:f1:44:55:84:66:44:53:67:
                    9d:5b:76:18:36:7f:5f:51:ba:3d:24:c9:af:21:b4:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3A:C5:71:A1:D5:3A:F8:39:27:6D:F1:D4:13:D4:4E:CE:F0:81:8A
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230302e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:58:69:1f:a5:25:ee:46:38:cf:3b:69:b1:4d:03:ab:06:de:
         f0:c5:e4:90:f6:2c:23:b4:b1:49:05:8e:d0:90:64:c7:68:3a:
         a7:93:af:1a:5e:f5:0c:f3:b6:6c:1e:77:e1:bf:8e:43:ca:3f:
         5e:6b:8a:fc:78:08:3c:5f:89:b2:e6:f9:a4:e1:5a:09:b8:e7:
         6f:31:26:a1:43:84:ad:17:db:8c:2f:09:1e:ba:23:62:34:82:
         0a:8a:43:21:70:76:6c:8e:f2:44:0c:b1:a6:12:c8:60:a0:af:
         ac:56:ba:45:d7:8b:98:5c:a5:74:1d:41:4e:5a:76:51:91:82:
         01:63:b2:3f:0b:1b:25:eb:e0:06:f1:86:b5:4c:b9:0e:96:22:
         d3:8e:ae:32:8d:b9:cf:f0:89:07:ee:15:ae:b5:ad:bf:90:91:
         a0:0a:dc:ee:ff:4c:61:76:d6:4a:9e:4c:a1:86:51:f7:19:44:
         7a:32:7c:6c:9b:f4:75:b0:d7:89:d9:11:db:a3:a0:f3:e7:a8:
         c3:52:44:50:86:91:75:8d:d0:b8:43:04:33:2f:95:1a:1d:da:
         08:b4:8b:17:56:45:6d:34:88:86:7e:bd:32:3a:4e:14:1a:26:
         6f:da:b6:a1:90:f8:97:98:db:32:34:96:01:c8:5b:47:43:bd:
         08:e6:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:15 2026 by rpki-client